start of 6.3 adding a secure password